Possible BGP hijack

Beginning at 2017-03-20 21:46:21 UTC, we detected a possible BGP hijack.

Prefix, is normally announced by AS263131 Crvnet Comunicações Junqueira e Guimarães ltda.

But beginning at 2017-03-20 21:46:21, the same prefix ( was also announced by ASN 10104.

This was detected by 31 BGPMon peers.

Start time: 2017-03-20 21:46:21 UTC
Expected prefix:
Expected ASN: 263131 (Crvnet Comunicações Junqueira e Guimarães ltda)
Event Details
Detected advertisement:
Detected Origin ASN 10104 (INTERNETDEPOT -- Internet Depot)
Detected AS Path 200005 3356 3549 53209 10102 10104
Detected by number of BGPMon peers: 31

Watch the replay of this event